SB2025070842 - Multiple vulnerabilities in Microsoft Windows Routing and Remote Access Service (RRAS)
Published: July 8, 2025
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 16 secuirty vulnerabilities.
1) Heap-based buffer overflow (CVE-ID: CVE-2025-49729)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
2) Heap-based buffer overflow (CVE-ID: CVE-2025-49676)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
3) Double free (CVE-ID: CVE-2025-49688)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger double free error and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
4) Out-of-bounds read (CVE-ID: CVE-2025-49681)
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in Windows Routing and Remote Access Service (RRAS). A remote attacker can trigger an out-of-bounds read error and read contents of memory on the system.
5) Heap-based buffer overflow (CVE-ID: CVE-2025-47998)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
6) Heap-based buffer overflow (CVE-ID: CVE-2025-49663)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
7) Heap-based buffer overflow (CVE-ID: CVE-2025-49657)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
8) Heap-based buffer overflow (CVE-ID: CVE-2025-49669)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
9) Heap-based buffer overflow (CVE-ID: CVE-2025-49668)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
10) Heap-based buffer overflow (CVE-ID: CVE-2025-49674)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
11) Heap-based buffer overflow (CVE-ID: CVE-2025-49672)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
12) Heap-based buffer overflow (CVE-ID: CVE-2025-49670)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
13) Heap-based buffer overflow (CVE-ID: CVE-2025-49673)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
14) Heap-based buffer overflow (CVE-ID: CVE-2025-49753)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
15) Heap-based buffer overflow (CVE-ID: CVE-2025-48824)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a victim into sending a request to a malicious server, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
16) Information disclosure (CVE-ID: CVE-2025-49671)
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output by the application in Windows Routing and Remote Access Service (RRAS). A remote attacker can gain unauthorized access to sensitive information on the system.
Remediation
Install update from vendor's website.
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49729
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49676
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49688
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49681
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-47998
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49663
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49657
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49669
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49668
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49674
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49672
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49670
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49673
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49753
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-48824
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-49671